cb999 Privacy Policy
Your Data, Your Rights
cb999 is committed to protecting the personal data of every Pakistani player who uses our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and the rights available to you as a registered user.
Six Privacy Principles That Govern How cb999 Handles Your Data
Purpose Limitation
cb999 collects personal data only for clearly defined, lawful purposes — account management, payment processing, identity verification, regulatory compliance, and responsible gaming. Your data is never used for purposes inconsistent with those stated in this Policy.
Data Minimisation
We collect only the minimum personal data required to deliver our services to you effectively. We do not collect data speculatively, and we do not request information that is not necessary for the specific purpose at hand — including during your cb999 login and registration process.
Security by Default
All personal data held by cb999 is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data within our organisation is restricted on a strict need-to-know basis, with full audit logging of all access events.
Your Rights Are Real
Registered cb999 Players have the right to access, correct, and request deletion of their personal data, subject to applicable legal retention obligations. We respond to all verified data rights requests within thirty (30) days of receipt.
No Data Sales
cb999 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Data shared with third parties is limited to those strictly necessary to deliver our services — such as payment processors and KYC verification providers.
Defined Retention Periods
cb999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law — including anti-money-laundering (AML) regulations that may require us to retain transaction records for extended periods.
Contents
- 1. Introduction & Scope
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Payment Data
- 8. Cookies & Tracking
- 9. Third-Party Sharing
- 10. International Transfers
- 11. Data Retention
- 12. Your Rights
- 13. Security Measures
- 14. Children's Privacy
- 15. Marketing Communications
- 16. Policy Amendments
- 17. Contact & Complaints
This Privacy Policy ("Policy") describes how cb999, operating at cb999.bio ("we", "us", "our", "the Platform"), collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or register on the cb999 platform. This Policy forms part of the broader legal framework governing the use of cb999, alongside our Terms & Conditions and Responsible Gaming Policy.
1. Introduction & Scope
cb999 respects the privacy of every individual who interacts with our platform. This Policy applies to all personal data collected from individuals who visit the cb999 website, create a registered account, make deposits or withdrawals, participate in promotions, contact our support team, or otherwise interact with any cb999 product or service.
This Policy applies regardless of the device or network used to access cb999 — whether a mobile phone on Jazz 4G in Lahore, a desktop connection via Zong in Karachi, or any other method of access available to Pakistani players.
By registering with cb999 or continuing to use the platform following any notification of a Policy update, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
2. Data Controller
For the purposes of applicable data protection law, the data controller responsible for the personal data processed in connection with the cb999 platform is the legal entity operating cb999 under its international online gaming licence. Queries regarding the identity of the data controller or the jurisdiction of processing may be directed to [email protected].
Where cb999 engages third-party service providers to process personal data on its behalf — for example, KYC verification partners or payment processors — those third parties act as data processors under the instruction and oversight of cb999 as the data controller.
3. Personal Data We Collect
cb999 collects the following categories of personal data in the ordinary course of operating the platform:
3.1 Identity Data
Full legal name, date of birth, national identity number (CNIC), gender, and a copy of valid government-issued identity documentation where required for KYC verification.
3.2 Contact Data
Registered Pakistani mobile number, email address (where provided), and any communication preferences specified by the Player.
3.3 Financial Data
Details of deposits and withdrawals processed through your cb999 account, including the payment method used (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20), transaction amounts in PKR, and transaction timestamps. cb999 does not store full mobile wallet PINs, banking passwords, or equivalent credentials.
3.4 Gaming Activity Data
Records of all gaming sessions, wagers placed, game outcomes, betting history (including cricket and PSL markets), bonus activations, and responsible gaming tool usage.
3.5 Technical Data
IP address, device type and model, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL — collected automatically when you access the cb999 platform.
3.6 Communications Data
Records of any communications between you and cb999, including live chat transcripts, support ticket content, and any written correspondence submitted to our support team.
No Sensitive Special Category Data: cb999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or data concerning health — unless specifically required by applicable regulatory obligations and with your explicit consent where legally mandated.
4. How We Collect Your Data
cb999 collects personal data through the following methods:
| Collection Method | Data Types Collected | When It Occurs |
|---|---|---|
| Direct Registration | Identity data, contact data | When you create a cb999 account |
| KYC Verification | Identity documents, CNIC copy | Upon withdrawal or account verification request |
| Payment Transactions | Financial data, payment method details | When you deposit or withdraw funds via JazzCash, EasyPaisa, bank transfer, or crypto |
| Platform Usage | Gaming activity data, session data | Continuously during your use of the cb999 platform |
| Automated Technologies | Technical data, cookies | Automatically upon accessing the cb999 website or app |
| Support Communications | Communications data | When you contact cb999 via live chat or email |
| Third-Party Sources | Identity verification results, fraud screening data | When we engage licensed KYC/AML verification partners |
5. Legal Basis for Processing
cb999 processes personal data on the following legal bases, as appropriate to each processing activity:
- Contractual Necessity: Processing required to perform our obligations under the User Agreement — including account management, payment processing, game delivery, and customer support.
- Legal Obligation: Processing required to comply with applicable law — including anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and reporting obligations under our gaming licence.
- Legitimate Interests: Processing necessary for the legitimate interests of cb999 — including fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement — provided that such interests are not overridden by your rights and freedoms.
- Consent: Where we rely on consent as the legal basis for processing — for example, in connection with certain marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6. How We Use Your Personal Data
cb999 uses the personal data we collect for the following purposes:
- To create, verify, and administer your cb999 account, including processing your cb999 login credentials securely;
- To process deposits and withdrawals in PKR via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20);
- To verify your identity in accordance with our KYC obligations under our international gaming licence;
- To deliver the gaming products and services you request, including cricket betting markets, live casino, slots, and instant games;
- To administer promotional bonuses, loyalty programmes, and incentive schemes you have opted into;
- To monitor for and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct;
- To fulfil our responsible gaming obligations — including monitoring for signs of problem gambling and enforcing self-exclusion requests;
- To provide customer support and resolve disputes, complaints, or queries you raise with our team;
- To send you transactional communications — such as deposit confirmations, withdrawal updates, and account security alerts — that are necessary for account operation;
- To send marketing communications, where you have opted in to receive them, about cb999 promotions, PSL special offers, and new product launches;
- To comply with our legal and regulatory obligations under applicable law and our gaming licence conditions;
- To analyse and improve the performance, security, and user experience of the cb999 platform.
7. Payment Data & Financial Transactions
All financial transactions on cb999 are processed through licensed payment service providers. When you make a deposit via JazzCash or EasyPaisa, your mobile wallet credentials are entered directly into those providers' secure interfaces — cb999 does not receive or store your JazzCash PIN, EasyPaisa PIN, or any equivalent authentication credential.
For bank transfer deposits via HBL, UBL, or Meezan Bank, cb999 receives confirmation of the transaction amount and sender account details from the bank's notification system. For USDT TRC20 cryptocurrency deposits, cb999 records the transaction hash, wallet address, and PKR-equivalent amount at the time of conversion.
Transaction records — including deposit amounts, withdrawal requests, and account balance history — are retained for a minimum period as required under applicable AML regulations and gaming licence conditions. This retention obligation may extend beyond the closure of your cb999 account.
All payment data transmitted between you and cb999 is protected by 256-bit SSL/TLS encryption. cb999 is committed to maintaining payment data security standards consistent with applicable best practices for licensed online gaming platforms.
8. Cookies & Tracking Technologies
cb999 uses cookies and similar tracking technologies — including browser cookies, session storage, local storage, and web beacons — to operate the platform, personalise your experience, and analyse platform performance.
Types of Cookies We Use
- Strictly Necessary Cookies: Essential to the operation of the cb999 platform — including session management, authentication (your cb999 login session), security, and core platform functionality. These cannot be disabled without impeding your ability to use the platform.
- Performance & Analytics Cookies: Used to understand how Players navigate and use cb999, including which pages are most visited, where errors occur, and how game loading performance can be improved. Data collected is aggregated and anonymised.
- Functional Cookies: Used to remember your preferences — such as your preferred language, your most recently played games, or your device settings — to provide a more personalised experience on return visits.
- Marketing Cookies: Used to deliver relevant promotional content to Players who have opted into marketing communications. These cookies may track your activity across sessions to build a profile of your gaming interests.
You may adjust your browser settings to refuse or delete non-essential cookies at any time. Please note that disabling certain cookies may affect the functionality of the cb999 platform. A full cookie management preference centre is accessible from the platform's cookie notice.
9. Third-Party Data Sharing
cb999 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances, and only to the extent necessary:
- Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency gateway providers receive the minimum transaction data necessary to process your deposits and withdrawals.
- KYC & AML Verification Providers: Licensed identity verification and anti-money-laundering screening services receive identity data necessary to complete your account verification in accordance with our regulatory obligations.
- Game Software Providers: Third-party game developers and providers may receive your player identifier and session data for the purpose of delivering their games within the cb999 platform and maintaining their own certification and audit obligations.
- Regulatory Authorities: cb999 will disclose personal data to its gaming licensing authority, financial regulators, or law enforcement agencies where required to do so by law, court order, or regulatory requirement.
- IT & Platform Service Providers: Cloud hosting, cybersecurity, and customer support technology providers who process data on cb999's behalf under strict data processing agreements.
Contractual Safeguards: All third-party data processors engaged by cb999 are subject to contractual data processing agreements that bind them to process personal data only as instructed by cb999, apply appropriate security measures, and comply with applicable data protection obligations.
10. International Data Transfers
As an internationally licensed online gaming platform, cb999 may transfer personal data to servers, processors, or service providers located outside Pakistan. Where such transfers occur, cb999 ensures that appropriate safeguards are in place to protect the transferred data — including standard contractual clauses, adequacy decisions where available, or equivalent legally recognised transfer mechanisms.
By using the cb999 platform, you acknowledge and consent to the international transfer of your personal data as described in this Section, subject always to the security and privacy protections described in this Policy.
11. Data Retention
cb999 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following retention principles:
- Active Account Data: Retained for the duration of your account being active on the cb999 platform.
- Financial & Transaction Records: Retained for a minimum of five (5) years following the relevant transaction, in accordance with applicable AML legislation and gaming licence requirements.
- KYC / Identity Documents: Retained for the period required by our licensing authority — typically five (5) years from account closure or the date of the last transaction, whichever is later.
- Responsible Gaming Records: Self-exclusion and responsible gaming intervention records are retained for a minimum of five (5) years to prevent circumvention of exclusion orders.
- Support Communications: Retained for three (3) years following the closure of the relevant support ticket, unless the communication relates to an ongoing dispute or regulatory matter.
- Technical & Log Data: Typically retained for twelve (12) months, unless required for longer periods in connection with a security incident investigation.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents recovery or reconstruction.
12. Your Privacy Rights
As a registered cb999 Player, you have the following rights with respect to your personal data:
- Right of Access: You may request a copy of the personal data we hold about you. We will provide this within thirty (30) days of a verified request.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your cb999 account. Many data fields can be updated directly within your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — we cannot delete data we are required by law to retain.
- Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding its accuracy is being resolved.
- Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to the processing of your personal data where cb999 relies on legitimate interests as the legal basis for that processing, and where your interests, rights, and freedoms override those legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please contact cb999 at [email protected] or via live chat with a clear description of your request. We will verify your identity before processing any data rights request.
13. Security Measures
cb999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between Players and the cb999 platform;
- AES-256 encryption for personal data stored at rest on cb999's servers;
- Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
- Two-factor authentication (2FA) options available to all registered Players for account login security;
- Regular penetration testing and vulnerability assessments by qualified cybersecurity professionals;
- Intrusion detection systems monitoring platform infrastructure for anomalous activity;
- Employee security awareness training and clear internal data handling policies;
- An incident response plan in place for responding to data security breaches in a timely manner.
In the event of a data security breach that is likely to result in a risk to your rights and freedoms, cb999 will notify you without undue delay in accordance with applicable notification requirements.
14. Children's Privacy — 21+ Policy
The cb999 platform is strictly restricted to individuals who are 21 years of age or older. cb999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will immediately delete that data and close the associated account.
If you are a parent or guardian and believe that your child has registered with cb999 without your knowledge, please contact us immediately at [email protected] so that we may investigate and take appropriate action.
15. Marketing Communications
cb999 may send you promotional communications — including information about welcome bonuses, PSL season promotions, new game launches, and reload offers — where you have provided your consent to receive such communications at the time of registration or through your account marketing preferences.
You may opt out of marketing communications at any time by updating your notification preferences within your cb999 account settings, or by notifying our support team via live chat or email. Opting out of marketing communications will not affect your receipt of transactional communications necessary for account operation.
cb999 will not send marketing communications to Players who are under a self-exclusion order or who have been identified as at-risk through our responsible gaming monitoring processes.
16. Amendments to This Policy
cb999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the products and services we offer. Where amendments are material, we will notify registered Players via the mobile number or email address associated with their account, and by posting a notice on the cb999 platform prior to the changes taking effect.
We encourage you to review this Policy periodically. The "Effective Date" at the top of this document reflects the date on which the current version came into force. Your continued use of the cb999 platform following notification of any amendment constitutes your acceptance of the revised Policy.
17. Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cb999, please contact us through the following channel:
Live Support: Available 24/7 via live chat on the cb999 platform
Email: [email protected]
We aim to acknowledge all privacy enquiries within 48 hours and to resolve them within thirty (30) calendar days. Where your request is complex or involves multiple data types, we will keep you informed of progress and any extension of the response timeline.
If you are not satisfied with cb999's response to your privacy concern, you have the right to lodge a complaint with the data protection supervisory authority relevant to your jurisdiction, or with the regulatory body overseeing cb999's gaming licence, as appropriate.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions published on the cb999 platform.
Play at cb999 With Complete Confidence
Now that you understand how cb999 handles your data — with industry-standard encryption, zero data sales, and full respect for your rights — experience Pakistan's most trusted licensed gaming platform for yourself. Cricket betting, live casino, 500+ slots, all with instant PKR payouts.
21+ only. cb999 is licensed and regulated. Please play responsibly.